Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/48323F4EC06250B666CEA3AD182055DC4D6CBFE6.cer
File:                     48323F4EC06250B666CEA3AD182055DC4D6CBFE6.cer (raw, json)
Hash identifier:          56i63bSnwO7H2lMumMbxlKLrPa5mEJHE1tijd35m+dM=
Subject key identifier:   48:32:3F:4E:C0:62:50:B6:66:CE:A3:AD:18:20:55:DC:4D:6C:BF:E6
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0189B2AD8FFF65F98357AF0EC4EBA556D0A5F1EA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5cBrkPiEgDz2ebwCR1AmBGN7NzyN7G2v4SgnJbmoU7Pj/1/48323F4EC06250B666CEA3AD182055DC4D6CBFE6.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5cBrkPiEgDz2ebwCR1AmBGN7NzyN7G2v4SgnJbmoU7Pj/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 11:33:41 +0000
Certificate not after:    Thu 03 Apr 2025 11:38:41 +0000
Subordinate resources:    AS: 270261
                          IP: 200.110.200.0/22
                          IP: 2804:694c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:b2:ad:8f:ff:65:f9:83:57:af:0e:c4:eb:a5:56:d0:a5:f1:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr  4 11:33:41 2024 GMT
            Not After : Apr  3 11:38:41 2025 GMT
        Subject: CN=48323F4EC06250B666CEA3AD182055DC4D6CBFE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:4a:87:a5:6b:58:10:cc:b5:91:27:d2:4c:55:
                    fb:df:ab:41:63:35:c9:f7:22:88:ff:b9:cd:62:c0:
                    3a:cd:a8:df:d3:cb:03:a1:03:6e:9f:2b:50:82:e9:
                    be:5a:35:0d:87:87:09:c4:1b:98:89:89:93:32:72:
                    6c:e0:7d:aa:21:35:df:7e:bd:4c:75:37:16:c3:91:
                    cd:e4:d2:e2:50:d1:ae:87:b3:93:0b:4c:9b:b1:ca:
                    7c:be:a5:83:0f:a6:71:02:06:03:9e:d8:1f:d1:ed:
                    99:40:93:f3:9d:b8:e7:d7:da:b3:31:d3:ab:f1:d5:
                    d2:dd:64:18:be:af:6c:c1:f0:5b:1f:e2:55:f7:5c:
                    8e:0b:81:bb:53:d1:54:73:a6:b6:4c:b6:49:1d:e7:
                    b9:8d:52:8b:c1:b1:c5:89:30:9b:2e:23:2c:9f:1c:
                    b9:c1:0f:f3:6d:30:bc:0f:1f:76:72:2d:bb:5e:eb:
                    23:5d:c6:a3:bd:49:96:9c:7b:47:b7:2d:88:ad:72:
                    70:2a:0d:c6:0e:fe:c5:c1:3b:d6:bd:42:89:23:12:
                    5f:c0:7e:8d:88:5e:bd:ee:7c:93:23:d8:bf:fd:df:
                    ee:96:2d:51:c7:23:7a:bf:a8:ef:7e:1e:85:27:d2:
                    10:c0:66:cf:96:4c:c4:25:8e:a8:2d:36:d2:d5:5b:
                    52:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                48:32:3F:4E:C0:62:50:B6:66:CE:A3:AD:18:20:55:DC:4D:6C:BF:E6
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5cBrkPiEgDz2ebwCR1AmBGN7NzyN7G2v4SgnJbmoU7Pj/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5cBrkPiEgDz2ebwCR1AmBGN7NzyN7G2v4SgnJbmoU7Pj/1/48323F4EC06250B666CEA3AD182055DC4D6CBFE6.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.110.200.0/22
                IPv6:
                  2804:694c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270261

    Signature Algorithm: sha256WithRSAEncryption
         aa:e0:3e:b4:82:9c:60:e2:da:70:95:c2:b8:b3:a9:d7:04:fc:
         63:95:2c:6a:8e:76:81:02:a6:4c:43:13:60:e4:63:70:ff:61:
         e8:7a:7f:5a:4e:68:d7:64:c8:ad:bd:a5:ec:15:5b:7d:46:03:
         17:c1:2f:8c:b6:17:d6:db:52:8d:83:5a:cf:f5:5c:ca:c3:92:
         49:24:db:d8:b0:36:31:58:2d:75:6b:e0:74:b9:72:1f:ca:67:
         d9:64:6e:a4:41:52:7a:6d:78:7c:d4:94:04:df:a1:89:7a:7d:
         cc:24:9e:07:40:b8:c3:ce:26:3f:a0:ff:ee:85:cb:c5:fc:07:
         70:9d:dc:a2:0b:a2:da:f2:53:e2:23:10:35:7a:c9:0c:06:b8:
         fd:26:f0:02:1f:1f:53:40:84:44:42:4b:a4:36:ce:6d:37:c0:
         f9:ff:63:87:4d:af:12:30:46:09:a6:cf:bf:32:c8:3f:33:67:
         26:a0:fa:34:ed:cb:2e:fc:b9:87:56:2e:14:f7:6b:98:f2:3f:
         48:8d:20:ef:1c:3f:3f:6c:84:a9:26:03:8d:ec:ba:f1:81:90:
         ff:0a:f5:ea:a3:41:19:6a:5e:3f:5a:a0:a3:65:ec:c4:e8:e3:
         e1:2f:db:06:2d:22:28:a0:d6:59:67:4e:14:98:d6:9f:7c:87:
         af:08:33:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----